Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ

error connecting: Windows OpenVPN package | RESOLVED

Looking for assistance with a cryptostorm connection issue? Post here & we'll help out. Also: if you're not sure where to post, do so here & we'll move things around as needed. Also: for quickest support, email our oddly calm & easygoing support reps at [email protected] :)

Topic Author
Riley

error connecting: Windows OpenVPN package | RESOLVED

Postby Riley » Wed Nov 20, 2013 10:26 am

Hello,

I get this error after I put my hashed token into the username box. Does anyone know how to fix this?

Image

User avatar

cryptostorm_support
ForumHelper
Posts: 296
Joined: Sat Jan 26, 2013 4:31 am
Contact:

Re: error connecting: Windows OpenVPN package

Postby cryptostorm_support » Wed Nov 20, 2013 1:47 pm

I'm echoing this over from a response that I believe is relevant to this error, and might be useful for other members. If the original poster prefers this not be here, just let me know and I'll remove it - thanks!

{snip}

This error you are seeing isn't actually an error. Let us explain: cryptostorm relies on a very precise choice of cipher suites to provide protection against known attack vectors using the best-tested open cryptographic primitives. This includes mandatory perfect forward secrecy via Diffie Hellman ephemeral discrete log asymmetric key exchange.

These suites are provided via the TLS protocol and underling cipher algorithms via OpenSSL (usually). Only the more current versions of these libraries support the cipher suites deployed by cryptostorm - in particular, DHE. These don't require the absolute most bleeding-edge versions of TLS or OpenSSL... but seriously old versions simply cannot provide the cipher algorithms necessary for cryptostorm's security model.

Put simply, if you upgrade your OpenSSL libraries this "error" will resolve and you will be able to connect :-)

The mechanics for doing this upgrade vary by OS; on Debian Linux distros, for example, it's a simple "sudo apt-get update" generally. On other platforms, there's equivalent procedures.

We're happy to point you at the correct procedure, or the OpenSSL project team at http://openssl.org has all available libraries, source code, and resources available if you prefer to go directly to them.

This is one place where we made the decision to require a baseline level of crypto tools, rather than veering more towards easy compatibility. It is a bit of a hassle to get upgraded initially, but the OpenSSL libraries are also used by essentially all web browsers for SSL/TLS security layer... so upgrading will also get you vastly improved cipher protection for HTTPS "secure" web browsing, including perfect forward secrecy (PFS) on many websites. There is no other way to do this than to upgrade OpenSSL, no "shortcut" in other words.

If we can be of further assistance, please let us know!

Best regards,

~ cryptostorm_team
cryptostorm_support shared support team forum account
PLEASE DON'T SEND PRIVATE MESSAGES with support questions!
--> feel free to use any of our other contact channels, or post in the support forum
cryptostorm: structurally anonymous, token-based, unlimited ☂ bandwidth, opensource, darknet data security for everyone!
keybase.io validatorsonename.io validatorsPGP key @ MITnetwork statuscryptostorm github
support team bitmessage address: BM-2cTMH8K5JnjbfSALjZtSkRWCLfc3Tr8GBV
support team email: [email protected]
live chat support: #cryptostorm

User avatar

cryptostorm_ops
ForumHelper
Posts: 104
Joined: Wed Jan 16, 2013 9:20 pm
Contact:

Re: error connecting: Windows OpenVPN package

Postby cryptostorm_ops » Mon Dec 09, 2013 1:36 pm

We're marking this thread as "resolved," as it appears to have been settled during recent upgrades to the Montreal exitnode cluster.

Thank you,

~ cryptostorm_ops


Return to “member support & tech assistance”

Who is online

Users browsing this forum: No registered users and 6 guests

Login